How to remove “Worm.Mabezat”?

The Worm.Mabezat is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Worm.Mabezat virus can do?

How to determine Worm.Mabezat?


File Info:
crc32: 4193E0F0
md5: d9516dfbcfa8b1a0e0e61d5fb54c36e1
name: D9516DFBCFA8B1A0E0E61D5FB54C36E1.mlw
sha1: e02e3007b0f5e1beaca7a539e8b92b6ecd0b7236
sha256: f801086f84996d269a7af05b2a0a5cd2bf0bc6682dc37ef980431455d594ec1e
sha512: 54945db073d5c57d0ed052e8d3eaa601e7927543275a5f07b50e6f24a6a367f21b84494765519096ce97d10fef93afc54570f6caafdf14245406d1f284cc66c6
ssdeep: 1536:rQYeCAsFUXIA4UudgmsytledMIqvL1Pqr6W:rBQ3uSoledMJvLwrf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Worm.Mabezat also known as:

Bkav	W32.Pharoh.Worm
K7AntiVirus	Virus ( 000ad08b1 )
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Tazebama
Cynet	Malicious (score: 100)
CAT-QuickHeal	W32.Mabezat.Dr
ALYac	Win32.Worm.Mabezat.S
Cylance	Unsafe
Zillya	Worm.MabezatGen.Win32.3
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Virus ( 000ad08b1 )
Cybereason	malicious.bcfa8b
Baidu	Win32.Worm.Mabezat.b
Cyren	W32/Mabezat.dam!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Mabezat.A
APEX	Malicious
Avast	Win32:Crypt-KUG [Trj]
ClamAV	Win.Trojan.Mabezat-1
Kaspersky	Worm.Win32.Mabezat.b
BitDefender	Win32.Worm.Mabezat.S
NANO-Antivirus	Virus.Win32.Mabezat.kfroy
MicroWorld-eScan	Win32.Worm.Mabezat.S
Tencent	Trojan.Win32.Mabezat.a
Ad-Aware	Win32.Worm.Mabezat.S
Sophos	ML/PE-A + W32/Mabezat-B
Comodo	Worm.Win32.Mabezat.b@14k3c8
BitDefenderTheta	AI:FileInfector.72161D3514
VIPRE	Worm.Win32.Mabezat.b (v)
TrendMicro	PE_MABEZAT.B-O
McAfee-GW-Edition	W32/Mabezat.h
FireEye	Generic.mg.d9516dfbcfa8b1a0
Emsisoft	Win32.Worm.Mabezat.S (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Mabezat.g
Avira	WORM/Mabezat.b
Antiy-AVL	Trojan/Generic.ASVirus.28
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Win32.Worm.Mabezat.S
AhnLab-V3	Worm/Win32.Mabezat.R9046
McAfee	Artemis!D9516DFBCFA8
MAX	malware (ai score=82)
Malwarebytes	Worm.Mabezat
Panda	W32/Mabezat.C.worm
TrendMicro-HouseCall	PE_MABEZAT.B-O
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazr2LgXrfu0RWKC8PnwOyqFf)
Ikarus	Worm.Win32.Mabezat
MaxSecure	Virus.Mabezat.B
Fortinet	W32/Mabezat.B!worm
AVG	Win32:Crypt-KUG [Trj]

How to remove Worm.Mabezat?

Worm.Mabezat removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X